JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.194.33.3

20.194.33.3 was found in our database!

This IP was reported 257 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.194.33.3

Whois 20.194.33.3

IP Abuse Reports for 20.194.33.3:

This IP address has been reported a total of 257 times from 185 distinct sources. 20.194.33.3 was first reported on June 29th 2026, and the most recent report was 53 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admin-Gito	2026-07-01 01:29:59 (53 minutes ago)	20.194.33.3 - - [01/Jul/2026:03:26:09 +0200] "GET /wp-includes/css/about.php HTTP/1.1" 404 355322 "- ... show more 20.194.33.3 - - [01/Jul/2026:03:26:09 +0200] "GET /wp-includes/css/about.php HTTP/1.1" 404 355322 "-" "-" 20.194.33.3 - - [01/Jul/2026:03:26:22 +0200] "GET /wp-includes/rest-api/about.php HTTP/1.1" 404 355320 "-" "-" 20.194.33.3 - - [01/Jul/2026:03:26:24 +0200] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 404 355327 "-" "-" 20.194.33.3 - - [01/Jul/2026:03:26:44 +0200] "GET /wp-includes/css.php HTTP/1.1" 404 355309 "-" "-" 20.194.33.3 - - [01/Jul/2026:03:26:48 +0200] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 404 355341 "-" "-" 20.194.33.3 - - [01/Jul/2026:03:26:59 +0200] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 355358 "-" "-" 20.194.33.3 - - [01/Jul/2026:03:27:03 +0200] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 404 355326 "-" "-" 20.194.33.3 - - [01/Jul/2026:03:27:06 +0200] "GET /wp-includes/customize/chosen.php HTTP/1.1" 404 355322 "-" "-" 20.194.33.3 - - [01/Jul/2026:03:27:10 +0200] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" ... show less	Web App Attack
🇩🇪 Jarda_H	2026-07-01 01:27:32 (55 minutes ago)	php-url-scan Attack Detected	Hacking Web App Attack
🇫🇷 ✨	2026-07-01 01:20:08 (1 hour ago)	Domain : skrimshire.net Rule : admin 2026-07-01 01:16:01 W3SVC434 PLESK72 79.171.39.6 GET /admin.php ... show more Domain : skrimshire.net Rule : admin 2026-07-01 01:16:01 W3SVC434 PLESK72 79.171.39.6 GET /admin.php - 443 - 20.194.33.3 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 - - skrimshire.net 404 0 2 417 701 280 - - show less	Hacking SQL Injection Brute-Force
🇺🇦 URAN Publishing Service	2026-07-01 01:14:18 (1 hour ago)	20.194.33.3 - - [01/Jul/2026:04:14:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 20.194.33.3 - - [01/Jul/2026:04:14:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 707 "-" "-" ... show less	Web App Attack
🇸🇬 ipidentify	2026-07-01 00:52:39 (1 hour ago)	2026-07-01T00:52:44Z GET /wp-admin/maint/about.php 2026-07-01T00:52:44Z GET /wp-admin/install.php 20 ... show more 2026-07-01T00:52:44Z GET /wp-admin/maint/about.php 2026-07-01T00:52:44Z GET /wp-admin/install.php 2026-07-01T00:52:45Z GET /wp-admin/css/colors/about.php 2026-07-01T00:52:45Z GET /wp-admin/users.php 2026-07-01T00:52:49Z GET /wp-admin/includes/users.php 2026-07-01T00:52:49Z GET /wp-admin/css/colors/ectoplasm/admin.php 2026-07-01T00:52:49Z GET /wp-admin/images/admin.php 2026-07-01T00:52:49Z GET /wp-admin/js/about.php7 2026-07-01T00:52:50Z GET /wp-admin/wp.php 2026-07-01T00:52:52Z GET /wp-admin/user/cloud.php show less	Web App Attack
🇬🇧 andypiper	2026-07-01 00:47:36 (1 hour ago)	CrowdSec ban for crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 helios.live	2026-07-01 00:47:21 (1 hour ago)	2026/07/01 00:47:20 [error] 2627845#2627845: 400543 FastCGI sent in stderr: "Primary script unknown ... show more 2026/07/01 00:47:20 [error] 2627845#2627845: 400543 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.194.33.3, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 20.194.33.3 - - [01/Jul/2026:00:47:20 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-" 2026/07/01 00:47:20 [error] 2627845#2627845: 400543 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.194.33.3, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com" 20.194.33.3 - - [01/Jul/2026:00:47:20 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-" 2026/07/01 00:47:20 [error] 2627845#2627845: 400543 FastCGI s ... show less	Web App Attack
🇷🇺 sms.ru	2026-07-01 00:37:44 (1 hour ago)	/wp-admin/js/index.php	Web App Attack
🇩🇪 Philister11	2026-07-01 00:36:20 (1 hour ago)	CrowdSec: crowdsecurity/http-admin-interface-probing (KR/AS8075)	Web App Attack Hacking
🇫🇷 ✨	2026-07-01 00:27:12 (1 hour ago)	Domain : netenergy.net Rule : admin 2026-07-01 00:25:34 *hidden-privacy* GET /wp-admin/404.php - ... show more Domain : netenergy.net Rule : admin 2026-07-01 00:25:34 *hidden-privacy* GET /wp-admin/404.php - 443 - 20.194.33.3 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 - netenergy.net 302 0 0 444 707 248 - - show less	Exploited Host Web App Attack
🇫🇷 ✨	2026-07-01 00:07:17 (2 hours ago)	Domain : airwaysdirect.co.uk Rule : config 2026-07-01 00:05:36 *hidden-privacy* GET /install.php ... show more Domain : airwaysdirect.co.uk Rule : config 2026-07-01 00:05:36 *hidden-privacy* GET /install.php - 443 - 20.194.33.3 HTTP/1.1 - - airwaysdirect.co.uk 404 0 2 1464 56 228 - - show less	Hacking SQL Injection
Anonymous	2026-07-01 00:01:51 (2 hours ago)	20.194.33.3 - - [01/Jul/2026:02:01:45 +0200] "GET /admin.php HTTP/1.1" 404 5615 20.194.33.3 - - [01/ ... show more 20.194.33.3 - - [01/Jul/2026:02:01:45 +0200] "GET /admin.php HTTP/1.1" 404 5615 20.194.33.3 - - [01/Jul/2026:02:01:46 +0200] "GET /goods.php HTTP/1.1" 404 578 20.194.33.3 - - [01/Jul/2026:02:01:47 +0200] "GET /classwithtostring.php HTTP/1.1" 404 578 20.194.33.3 - - [01/Jul/2026:02:01:47 +0200] "GET /wp-includes/block-supports/ HTTP/1.1" 404 578 20.194.33.3 - - [01/Jul/2026:02:01:47 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 578 20.194.33.3 - - [01/Jul/2026:02:01:47 +0200] "GET /gelay.php HTTP/1.1" 404 578 20.194.33.3 - - [01/Jul/2026:02:01:48 +0200] "GET /wp-admin/images/admin.php HTTP/1.1" 404 578 20.194.33.3 - - [01/Jul/2026:02:01:48 +0200] "GET /adminfuns.php HTTP/1.1" 404 578 20.194.33.3 - - [01/Jul/2026:02:01:49 +0200] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 404 578 20.194.33.3 - - [01/Jul/2026:02:01:49 +0200] "GET /about.php HTTP/1.1" 404 578 ... show less	Web Spam Web App Attack
🇩🇪 LRob.fr	2026-07-01 00:00:50 (2 hours ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇱🇻 garmtech.com	2026-07-01 00:00:10 (2 hours ago)	Attempted access to sensitive endpoint (/wp-admin/js/index.php) detected. Automated scan or unauthor ... show more Attempted access to sensitive endpoint (/wp-admin/js/index.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 macrob	2026-06-30 23:55:29 (2 hours ago)	2026/06/30 23:55:27 [error] 720044#720044: 341754393 access forbidden by rule, client: 20.194.33.3, ... show more 2026/06/30 23:55:27 [error] 720044#720044: 341754393 access forbidden by rule, client: 20.194.33.3, server: finami.mx, request: "GET /wp-admin/js/index.php HTTP/2.0", host: "finami.mx" 2026/06/30 23:55:27 [error] 720046#720046: 341754046 access forbidden by rule, client: 20.194.33.3, server: finami.mx, request: "GET /admin/controller/extension/extension/ HTTP/2.0", host: "finami.mx" 2026/06/30 23:55:27 [error] 720047#720047: 341755801 access forbidden by rule, client: 20.194.33.3, server: finami.mx, request: "GET /wp-content/about.php HTTP/2.0", host: "finami.mx" ... show less	Web App Attack

Showing 1 to 15 of 257 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 5.253.59.68

🇮🇩 202.152.201.166

🇹🇼 198.235.24.78

🇫🇮 147.185.133.227

🇨🇳 117.95.6.123

🇮🇩 103.203.234.42

🇳🇬 103.97.91.18

🇸🇮 102.220.160.47

🇧🇬 79.124.62.230

🇧🇪 34.62.189.186

🇮🇳 202.141.32.145

🇺🇸 173.194.103.87

🇸🇷 168.121.85.95

🇪🇸 158.158.43.25

🇳🇱 93.123.72.183

🇺🇸 65.49.1.232

🇱🇹 62.60.130.219

🇳🇱 45.148.10.141

🇧🇪 35.195.128.224

🇺🇸 2607:f8b0:4001:c2e::12a